VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/datacharmer/dbdeployer: vulnerability history, versions and safety

github.com/datacharmer/dbdeployer is a package in the Go ecosystem. Vulert records 2 vulnerabilities for it across 120 releases, from Feb 2022 to Aug 2024. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
2 vulnerabilities recorded M1 U1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/datacharmer/dbdeployer vulnerabilities

Vulert verdict on github.com/datacharmer/dbdeployer v1.73.0 i

Updated on 23 Oct 2026

Action needed: v1.73.0 has 2 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 69/100
  • Security Minor issues
  • Maintenance Maintaining
  • Popularity Widely used
  • Community Quiet

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v1.73.0 — affected i
  • Vulnerabilities on record 2 over 2 years · 0 in the last year i
  • Latest disclosure 21 Aug 2024 i
  • Highest CVSS 6.1 i
  • With no published fix 0 i
  • Stars 714 i
  • OpenSSF scorecard 2/10 i
  • Last release 39 months ago i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 22 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/datacharmer/dbdeployer, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v1.73.1-0.20260407175903-9a4e766aabf2 07 Apr 2026 M1 U1 Apache-2.0 Yes Details →
v1.73.1-0.20231029153914-3d7d73127e82 29 Oct 2023 M1 U1 Apache-2.0 Yes Details →
v1.72.1-0.20230709180517-59e4a4c3a7a2 09 Jul 2023 M1 U1 Apache-2.0 Yes Details →
v1.73.0 09 Jul 2023 M1 U1 Apache-2.0 Yes Details →
v1.72.1-0.20230224171645-b0932d9a86d3 24 Feb 2023 M1 U1 Apache-2.0 Yes Details →
v1.72.0 22 Jan 2023 M1 U1 Apache-2.0 Yes Details →
v1.71.0 11 Dec 2022 M1 U1 Apache-2.0 Yes Details →
v1.70.1-0.20221101175704-e33fc900750f 01 Nov 2022 M1 U1 Apache-2.0 Yes Details →
v1.70.0 31 Oct 2022 M1 U1 Apache-2.0 Yes Details →
v1.69.3 07 Oct 2022 M1 U1 Apache-2.0 Yes Details →
v1.69.2 05 Sep 2022 M1 U1 Apache-2.0 Yes Details →
v1.69.2-0.20220905033124-d31bb855c8c7 05 Sep 2022 M1 U1 Apache-2.0 Yes Details →
v1.69.2-0.20220904184832-f9d93248c45a 04 Sep 2022 M1 U1 Apache-2.0 Yes Details →
v1.69.2-0.20220904184324-aae608812069 04 Sep 2022 M1 U1 Apache-2.0 Yes Details →
v1.69.2-0.20220904173359-0ff8e6696d0a 04 Sep 2022 M1 U1 Apache-2.0 Yes Details →
v1.69.2-0.20220904173240-dd1f0e26f56b 04 Sep 2022 M1 U1 Apache-2.0 Yes Details →
v1.69.2-0.20220904172954-56d966166c67 04 Sep 2022 M1 U1 Apache-2.0 Yes Details →
v1.69.2-0.20220904093650-1370285960a0 04 Sep 2022 M1 U1 Apache-2.0 Yes Details →
v1.69.2-0.20220904083511-c3a021b4e8a4 04 Sep 2022 M1 U1 Apache-2.0 Yes Details →
v1.69.2-0.20220903210138-3a1c9cf60d24 03 Sep 2022 M1 U1 Apache-2.0 Yes Details →
v1.69.1 03 Sep 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.1-0.20220903095712-94376b66c2f0 03 Sep 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.1-0.20220903095325-ba176bc73e9b 03 Sep 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.1-0.20220903051500-ac9581fdac03 03 Sep 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.1-0.20220903051324-e9d8ea94fcaa 03 Sep 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.1-0.20220903051142-fd7409a35a1e 03 Sep 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.1-0.20220830150740-c237c7dac958 30 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.1-0.20220830150631-d452fcf1e1df 30 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.1-0.20220830150612-e21df658a55a 30 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.1-0.20220830144458-e8439e883c67 30 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.1-0.20220829183040-6a2cc84caf81 29 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.1-0.20220829182956-f1ee911f978b 29 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.1-0.20220828060136-d1010fa23c24 28 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.1-0.20220827113821-01fdd37b18e4 27 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.1-0.20220827105606-eb48a4fcf5c0 27 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.69.1-0.20220827105204-1609b656b05f 27 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.69.0 24 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.69.0-beta.0.20220817132616-08677d272dcd 17 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.69.0-beta.0.20220817131304-76fa6e80a9d6 17 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.69.0-beta.0.20220817131232-70b23d87bde1 17 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.69.0-beta.0.20220816111456-ce765e7804e9 16 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.69.0-beta 16 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.1-0.20220816105615-5caead1963fb 16 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.1-0.20220816042948-24cdf7c0e133 16 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.1-0.20220815163207-0d8c953471f6 15 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.1-0.20220815120626-9c87959a7ba1 15 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.1-0.20220815111227-aa25fed02a92 15 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.1-0.20220814190906-bdf0e2acc1ce 14 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.1-0.20220814164339-c654d0270fa4 14 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.1-0.20220813172801-4229c5f90a50 13 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.1-0.20220813172744-be824e63ac92 13 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.1-0.20220813172714-203cf484e58d 13 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.1-0.20220813172655-8087b877fc50 13 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.1-0.20220813172508-d60ac72d0644 13 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.1-0.20220812085644-64c963b38e68 12 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.68.0 11 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.67.1-0.20220811134810-a3cc69e00d53 11 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.67.0 10 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220810183915-e146a80701d6 10 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220810144548-87159261b7ab 10 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220810144503-042196ee4d78 10 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220810141921-ae6c1c0663ea 10 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220810141215-1e9f38a2df69 10 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220809192255-f60f10f07a15 09 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220809192041-25dd1809860b 09 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220809191853-ff0574623933 09 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220809125725-958e52dd94d3 09 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220809113141-79bb6257dc1a 09 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220809111832-3706028c3136 09 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220809105648-0ff8e783c7a8 09 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220809105540-2aa38b7cae28 09 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220808185341-4557f7d91e48 08 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220808184213-2eec9e49e6c2 08 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220808184145-c9d8ed16607e 08 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220808184020-7b2b638f9058 08 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220807172431-7a001187981f 07 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220807172357-c1a225d84513 07 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220807080952-d112324cb650 07 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220807080904-c48a0f638cd3 07 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220807080749-2c8132cfb7d0 07 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220807080716-a403449cbb60 07 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220807080656-7f829a0b01b8 07 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220804053657-9945aefce0c2 04 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220804040820-27743be458b5 04 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220804040742-3602e9cb24bc 04 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220804040716-555ec0d2b67d 04 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220804040650-9ba5a7c44fcd 04 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220804040551-a47dc9ed1b28 04 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220804040521-a57e072c9604 04 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220804034943-6360a0f884b2 04 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220804034849-2ef67e291c93 04 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220804034749-fb081f4ac49a 04 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220804034704-02b04c4dbbae 04 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.1-0.20220804034622-ea18c5757009 04 Aug 2022 M1 U1 Apache-2.0 Yes Details →
v1.66.0 27 Jul 2022 M1 U1 Apache-2.0 Yes Details →
v1.65.3-0.20220727034653-01339a6b006f 27 Jul 2022 M1 U1 Apache-2.0 Yes Details →
v1.65.3-0.20220726110450-ea8e9fac1aad 26 Jul 2022 M1 U1 Apache-2.0 Yes Details →
v1.65.3-0.20220725142428-9f54e30ac02a 25 Jul 2022 M1 U1 Apache-2.0 Yes Details →
v1.65.3-0.20220725134724-005e672cc832 25 Jul 2022 M1 U1 Apache-2.0 Yes Details →
v1.65.3-0.20220725133417-0983926e1723 25 Jul 2022 M1 U1 Apache-2.0 Yes Details →
v1.65.3-0.20220725132742-f7284db2eacb 25 Jul 2022 M1 U1 — Yes Details →
v1.65.3-0.20220725132153-1bd1bd170991 25 Jul 2022 M1 U1 — Yes Details →
v1.65.3-0.20220725131118-d2ca87a35b3c 25 Jul 2022 M1 U1 — Yes Details →
v1.65.3-0.20220725130914-ebdab6335598 25 Jul 2022 M1 U1 — Yes Details →
v1.65.3-0.20220725103059-81caa53d5196 25 Jul 2022 M1 U1 — Yes Details →
v1.65.3-0.20220725103030-fdabd7bb57cb 25 Jul 2022 M1 U1 — Yes Details →
v1.65.3-0.20220725102956-41ea0a1b4a1c 25 Jul 2022 M1 U1 — Yes Details →
v1.65.3-0.20220725091115-79cc6fa219f5 25 Jul 2022 M1 U1 — Yes Details →
v1.65.3-0.20220725091020-18485770432b 25 Jul 2022 M1 U1 — Yes Details →
v1.65.3-0.20220725044944-fbeb3c306f60 25 Jul 2022 M1 U1 — Yes Details →
v1.65.3-0.20220724201004-bc8313ff73d7 24 Jul 2022 M1 U1 — Yes Details →
v1.65.3-0.20220724200901-62be875db5bb 24 Jul 2022 M1 U1 — Yes Details →
v1.65.3-0.20220704121359-af92b2253045 04 Jul 2022 M1 U1 — Yes Details →
v1.65.3-0.20220704121207-f627791b04bf 04 Jul 2022 M1 U1 — Yes Details →
v1.65.2 30 Jun 2022 M1 U1 — Yes Details →
v1.65.2-0.20220630131328-0f9bedd74534 30 Jun 2022 M1 U1 — Yes Details →
v1.65.2-0.20220628132853-ff591216de78 28 Jun 2022 M1 U1 — Yes Details →
v1.65.2-0.20220626081906-c54f8f56f69b 26 Jun 2022 M1 U1 — Yes Details →
v1.65.2-0.20220626081831-375ecf9bc2f1 26 Jun 2022 M1 U1 — Yes Details →
v1.65.2-0.20220626081500-d118b79dee1c 26 Jun 2022 M1 U1 — Yes Details →

The newest 120 of 577 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2022 1
  • 2024 1

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 2 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/datacharmer/dbdeployer

The 2 most severe of 2 vulnerabilities recorded for this package

Search all 2 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2020-26277: Symbolic links in dbdeployer unpacking routine enable arbitrary file read and write 6.1 medium 1.58.2 12 Feb 2022
CVE-2020-26277: Symbolic Links in Unpacking Routine in dbdeployer N/A unrated 1.58.2 21 Aug 2024

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/datacharmer/dbdeployer

Is github.com/datacharmer/dbdeployer safe to use?

Vulert records 2 vulnerabilities for github.com/datacharmer/dbdeployer in Go: 0 critical, 0 high, 1 medium and 0 low, plus 1 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/datacharmer/dbdeployer's Vulert package health score?

Vulert scores github.com/datacharmer/dbdeployer 69/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/datacharmer/dbdeployer affected?

Yes. v1.73.0, the version you would install today, has 2 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

Which version of github.com/datacharmer/dbdeployer should I use?

v1.73.0 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/datacharmer/dbdeployer have?

2 vulnerabilities are recorded for github.com/datacharmer/dbdeployer in the Go ecosystem: 0 critical, 0 high, 1 medium and 0 low, plus 1 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/datacharmer/dbdeployer vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/datacharmer/dbdeployer in the last 12 months, and the oldest entry in this database dates to 12 Feb 2022. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/datacharmer/dbdeployer are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/datacharmer/dbdeployer for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/datacharmer/dbdeployer version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.